Forum Discussion

LauraFW's avatar
LauraFW
Copper Contributor
Dec 27, 2019

Lost access to B2B organization after tenant migration

Hi. We recently migrated to a new tenant. Several users, including myself, have lost access to other organizations' Team(s) they were invited to. Our tenant name changed (and of course our onmicrosof...
Azure AD B2B
Paul Slijkhuis's avatar
Paul Slijkhuis
Brass Contributor
Apr 15, 2020

LauraFW Recently ran in this situation too. Since your UPN is unique per tenant / per IDP, the Guest account cannot match your claim. In my case the B2B hosts were large companies without an easy solution to delete Guest accounts or request assistance from an AAD user admin to resend invites. Think of Microsoft-size companies. 

The only solution I could think of is to create a mail alias and ask the owner(s) of the Teams to send a new invite. And remove the permissions for other account in Teams...


It would be a great idea to have a way to reset the Guest UPN and resend the redeem invite in a single action.

  • scottkercred's avatar
    scottkercred
    Copper Contributor
    Dec 17, 2020

    Paul Slijkhuis That is an exceptional idea "Reset my guest account". We just had to go through this with Azure DevOps access after a migration and it is PAINFUL. 

    • jschleider's avatar
      jschleider
      Copper Contributor
      Jan 09, 2021

      scottkercred 

       

      I am having a similar problem. I migrated o365 tenant single user with mailbox and Azure account. Cant find the Azure account. do you have a starting point and contacts with microsoft from your case? 

      • scottkercred's avatar
        scottkercred
        Copper Contributor
        Jan 11, 2021

        jschleider I've tried many different avenue to get this fixed. Teams is proving to be problematic. The fastest path to a solution is to add a secondary alias to your e-mail account (Ex: mailto:bob.smith@xxx.com is current, add mailto:bsmith@xxx.com as a secondary). 

         

        We've been able to solve the Azure DevOps access problem by deleting and re-adding the AAD guest account because ADO has an admin functionality for re-solving orphaned user issues (See attached image). Teams does not appear to have this same functionality for resolving orphans.

Resources